CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 251:

  UDP packets are delivered if they are .

  A. referenced in the SAM related dynamic tables
  B. a valid response to an allowed request on the inverse UDP ports and IP
  C. a stateful ACK to a valid SYN-SYN/ACK on the inverse UDP ports and IP
  D. bypassing the kernel by the forwarding layer of ClusterXL
  B. a valid response to an allowed request on the inverse UDP ports and IP

• Question 252:

  With deployment of SecureClient, you have defined in the policy that you allow traffic only to an encrypted domain. But when your mobile users move outside of your company, they often cannot use SecureClient because they have to register

  first (i.e. in Hotel or Conference rooms).

  How do you solve this problem?

  A. Allow traffic outside the encrypted domain
  B. Allow your users to turn off SecureClient
  C. Allow for unencrypted traffic
  D. Enable Hot Spot/Hotel Registration
  D. Enable Hot Spot/Hotel Registration

• Question 253:

  Which NAT option applicable for Automatic NAT applies to Manual NAT as well?

  A. Translate destination on client-side
  B. Enable IP Pool NAT
  C. Allow bi-directional NAT
  D. Automatic ARP configuration
  A. Translate destination on client-side

• Question 254:

  You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface. You browse to from host, 10.1.1.10 successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network. How many log entries do you see for that connection in SmartView Tracker?

  A. Two, one for outbound, one for inbound
  B. Only one, inbound
  C. Only one, outbound
  D. Two, both outbound, one for the real IP connection and one for the NAT IP connection
  C. Only one, outbound

• Question 255:

  Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities for this company? VPN Communities comprised of:

  A. Two star and one mesh Community: One star Community is set up for each site, with includes only New York and London Gateways.
  B. Three mesh Communities: One for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.
  C. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the mesh center Gateways option checked; all London branch offices defined in one satellite window, but, all New York branch offices defined in another satellite window.
  D. Two mesh and one star Community: One mesh Community is set up for each of the headquarters and its branch offices. The star Community is configured with London as the center of the Community and New York is the satellite.
  A. Two star and one mesh Community: One star Community is set up for each site, with includes only New York and London Gateways.

• Question 256:

  Of the following, what parameters will not be preserved when using Database Revision Control?

  

  A. 3, 4, 5, 6, 9, 12, 13
  B. 1, 2, 8, 10, 11
  C. 5, 6, 9, 12, 13
  D. 2, 4, 7, 10, 11
  A. 3, 4, 5, 6, 9, 12, 13

• Question 257:

  Message digests use which of the following?

  A. SHA-1 and MD5
  B. IDEA and RC4
  C. SSL and MD4
  D. DES and RC4
  C. SSL and MD4

• Question 258:

  What happens if you select Web Server in the dialog box?

  

  A. An implied rule will be added allowing HTTP request from and to the host.
  B. Anti-virus settings will be applied to the host.
  C. An implied rule will be added allowing HTTP requests to the host.
  D. Web Intelligence will be applied to the host.
  D. Web Intelligence will be applied to the host.

• Question 259:

  Which of the following statements accurately describes the command upgrade_export?

  A. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.
  B. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
  C. This command is no longer supported in GAiA.
  D. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
  A. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.

• Question 260:

  You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user group. You modify one rule and add two new rules to the Rule Base. You save the Security Policy and create database version 2. After awhile, you decide to roll back to version 1 to use the Rule Base, but you want to keep your user database. How can you do this?

  A. Restore the entire database, except the user database, and then create the new user and user group.
  B. Run fwm_dbexport to export the user database. Select restore the entire database in the Database Revision screen. Then, run fwm_dbimport.
  C. Run fwm dbexport -l filename. Restore the database. Then, run fwm dbimport -l filename to import the users.
  D. Restore the entire database, except the user database.
  D. Restore the entire database, except the user database.